Static task
static1
Behavioral task
behavioral1
Sample
225936f6238429b9d6643e539f03310b2c948f63037f70f483db33dfbdea3279.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
225936f6238429b9d6643e539f03310b2c948f63037f70f483db33dfbdea3279.exe
Resource
win10v2004-20220901-en
General
-
Target
225936f6238429b9d6643e539f03310b2c948f63037f70f483db33dfbdea3279
-
Size
140KB
-
MD5
6344b8f11e186c07448546cc216f9500
-
SHA1
e41a75bb1345d62e87a3df7746f1ad4d17544e5a
-
SHA256
225936f6238429b9d6643e539f03310b2c948f63037f70f483db33dfbdea3279
-
SHA512
32522426c1578d9f84cd2176a95085f969f9e5b65d897b50945452bea175df8dd49edce8bd926a5ca5ee163926badcc5c4a0958423a6d4e82faaa7b3b90aadef
-
SSDEEP
3072:b9Igwiryok8j8iuiIdW/woNZsPHla07Sccb:b7wi5nboU2FdGc
Malware Config
Signatures
Files
-
225936f6238429b9d6643e539f03310b2c948f63037f70f483db33dfbdea3279.exe windows x86
fcd0efb3a777e18d7355643477b5d5fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
lstrcpyA
lstrcatA
LoadLibraryA
WaitForMultipleObjects
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
GetLastError
CreateEventA
WaitForSingleObject
CreateThread
CloseHandle
GetVersionExA
CompareFileTime
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
GetCurrentProcess
TerminateProcess
RaiseException
ExitProcess
GetVersion
GetStartupInfoA
HeapReAlloc
LocalFree
RtlUnwind
HeapFree
HeapAlloc
user32
KillTimer
PostMessageA
PostThreadMessageA
EnumDisplaySettingsA
CharNextA
RegisterClassA
CreateWindowExA
ChangeDisplaySettingsExA
DispatchMessageA
SetTimer
PostQuitMessage
RegisterWindowMessageA
DefWindowProcA
GetMessageA
FindWindowA
SendNotifyMessageA
ChangeDisplaySettingsA
advapi32
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
ole32
CoTaskMemFree
CoCreateInstance
CoSuspendClassObjects
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoInitialize
oleaut32
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
SysFreeString
VariantClear
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
VariantInit
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE